Argocd 설치
https://argo-cd.readthedocs.io/en/stable/getting_started/
1
2
| $ kubectl create namespace argocd
$ kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
|
Client Side Argocd 설치
Disable internal TLS
ArgoCD 내부적으로 사용하는 https를 http로 변경 -> TLS 없이 통신 하도록 변경하자
1
2
| kubectl -n argocd edit deployments.apps argocd-server
{vim 이 뜸}
|
(before)
1
2
3
| containers:
- command:
- argocd-server
|
(after)
1
2
3
4
| containers:
- command:
- argocd-server
- --insecure
|
Ingress 생성 후 연동
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
| apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
namespace: argocd
name: ingress-argocd
annotations:
kubernetes.io/ingress.class: alb
alb.ingress.kubernetes.io/scheme: internet-facing
alb.ingress.kubernetes.io/target-type: ip
alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
alb.ingress.kubernetes.io/certificate-arn: { YOUR ARN }
alb.ingress.kubernetes.io/healthcheck-path: /
alb.ingress.kubernetes.io/healthcheck-protocol: HTTP
alb.ingress.kubernetes.io/ssl-redirect: '443'
finalizers:
- ingress.k8s.aws/resources
spec:
rules:
- host: xxx.xxx.com
http:
paths:
- backend:
service:
name: argocd-server
port:
number: 80
path: /*
pathType: ImplementationSpecific
|
Password 변경
초기 패스 워드 출력 -> 출력된 패스워드로 로그인 -> 패스워드 변경
1
2
3
4
| $ kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo
{PASSWORD 출력됨}
$ argocd login <ARGOCD_SERVER>
$ argocd account update-password
|